Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/56f10411-4489-347f-8d08-8f6071826d7e.roa
File:                     56f10411-4489-347f-8d08-8f6071826d7e.roa (raw, json)
Hash identifier:          8vfJaC25elkR5jL+fQR9KIP7eQAW0pLmX6/F46DVic8=
Subject key identifier:   8F:97:56:83:D1:6A:92:E0:4B:AD:92:ED:D9:7B:46:7A:37:2D:67:A7
Certificate issuer:       /CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
Certificate serial:       010D0C9F4328584CEA5D0171D114DBD0B15CD200
Authority key identifier: 26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/56f10411-4489-347f-8d08-8f6071826d7e.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2602:f6fc::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5d:01:71:d1:14:db:d0:b1:5c:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=120e6368-9df6-4cf1-b63b-fb59f9135052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b1:13:12:93:a0:80:2f:22:fa:47:6f:c8:73:
                    bd:49:e3:ef:54:03:84:1f:ad:da:0f:60:6a:ff:2d:
                    6f:ae:c5:cf:6a:ea:75:e4:85:df:7e:e8:1c:14:2c:
                    d4:6d:b8:63:2e:ed:60:55:6a:63:bb:2c:f6:c5:8c:
                    79:83:0a:e2:71:7a:79:a2:67:2c:f4:53:3f:48:ca:
                    9f:db:1f:9f:ac:f4:e8:00:0a:d3:fb:b9:f2:74:2e:
                    b2:ce:68:8a:c1:27:a4:cd:2f:0a:d9:70:bb:89:ae:
                    a1:a9:05:d0:06:3f:e2:73:34:76:93:1e:68:fe:5a:
                    8c:1c:b9:28:53:54:f4:7b:f6:b9:54:88:5b:24:53:
                    85:be:b0:20:1b:10:dd:96:37:c5:70:00:95:22:7e:
                    55:6f:96:76:f4:90:ce:11:83:f0:2a:24:d0:15:8b:
                    d2:68:10:1e:c8:43:2a:01:ab:50:d8:7e:73:5e:2f:
                    a5:d2:b1:a1:7c:a7:ae:23:a3:b8:b8:56:6b:56:a1:
                    bd:77:a1:96:11:06:a6:b4:1b:ae:5a:a6:6c:38:8c:
                    98:20:c3:fe:0e:93:69:f9:84:96:74:41:44:c4:8d:
                    3e:3e:52:ef:59:ad:3b:05:a3:5b:00:72:96:fd:e9:
                    b2:9f:3c:34:b2:80:cd:fb:f3:69:66:98:55:1e:1c:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:97:56:83:D1:6A:92:E0:4B:AD:92:ED:D9:7B:46:7A:37:2D:67:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/56f10411-4489-347f-8d08-8f6071826d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl

            X509v3 Authority Key Identifier:
                keyid:26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6fc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:54:14:aa:53:10:a6:9c:cd:a6:1c:11:a7:6e:30:1e:76:2f:
         c8:81:4d:8e:8f:06:15:0e:ef:52:6e:85:9f:f4:6f:ea:96:c4:
         7a:96:78:4c:4f:fb:b9:5d:12:84:51:7a:8f:00:a3:83:43:b3:
         43:35:5d:a4:e6:5f:42:c9:64:01:0f:44:a5:eb:10:19:dc:0f:
         81:93:39:33:1d:ec:af:2e:11:47:68:d0:f9:c3:42:26:29:c3:
         cc:f6:ac:1c:7b:24:5b:47:b1:fc:55:34:87:e4:ba:12:ce:37:
         84:6d:96:57:99:cb:6a:72:92:16:46:19:d2:7c:c0:1e:70:bd:
         64:68:ea:fb:0c:bc:07:9f:6e:19:57:db:67:3d:aa:dd:05:c3:
         ce:a7:a6:3d:bc:a1:06:61:17:8d:74:f0:0d:fe:f0:9f:1b:de:
         a4:1e:bc:33:a5:47:e9:6e:a8:4c:9e:15:7a:dc:26:ba:2e:1d:
         72:7f:8d:62:b0:c3:a6:ee:14:ba:cc:0f:51:a3:cc:3a:4a:1b:
         47:b5:2a:9c:b1:6a:56:9f:e5:24:8e:1d:e7:1e:8d:23:06:b9:
         24:6f:65:38:94:a6:4b:a2:32:df:aa:76:7c:50:8f:e9:b4:9f:
         1b:1d:01:a7:4d:1e:4e:f7:65:c5:cb:51:24:60:60:8d:ef:2a:
         56:a6:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:29 2026 by rpki-client